youtube-knowledge-mcp 2.1.0 → 2.2.0

package/dist/http/auth.js

@@ -0,0 +1,79 @@
+import { timingSafeEqual } from 'node:crypto';
+/** Bearer tokens, client identity, session ids and the JSON-RPC error envelope. */
+/**
+ * Compare a presented token against the configured one in constant time, so the
+ * endpoint does not leak the token's prefix through response timing.
+ */
+export function tokenMatches(presented, expected) {
+    if (presented === undefined)
+        return false;
+    const a = Buffer.from(presented);
+    const b = Buffer.from(expected);
+    // timingSafeEqual throws on length mismatch, which would itself be a leak;
+    // hash-free equalisation keeps the comparison constant-time for equal lengths
+    // and constant-result for unequal ones.
+    if (a.length !== b.length) {
+        timingSafeEqual(a, a);
+        return false;
+    }
+    return timingSafeEqual(a, b);
+}
+export function bearerToken(header) {
+    if (!header)
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+    return match?.[1];
+}
+/**
+ * The key a client is rate-limited under.
+ *
+ * `req.ip` is what Express derives after applying the `trust proxy` setting:
+ * the socket address by default, and the forwarded client only when the
+ * operator has said which proxies to believe. Reading `X-Forwarded-For`
+ * directly, as this once did, let any caller mint a fresh quota per request.
+ */
+export function clientKey(req) {
+    return req.ip ?? req.socket.remoteAddress ?? 'unknown';
+}
+/**
+ * Node parses a repeated header into an array, so this field is genuinely
+ * `string | string[] | undefined`. Asserting it was always a string meant a
+ * request that sent `Mcp-Session-Id` twice reached `sessions.get()` holding an
+ * array, missed every session, and was reported as an invalid session ID.
+ * Ambiguous is treated as absent: two session IDs identify no session.
+ */
+export function sessionIdOf(req) {
+    const header = req.headers['mcp-session-id'];
+    return typeof header === 'string' ? header : undefined;
+}
+export function jsonRpcError(res, status, code, message) {
+    if (res.headersSent)
+        return;
+    res.writeHead(status, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ jsonrpc: '2.0', error: { code, message }, id: null }));
+}
+/**
+ * The base URL this server publishes in OAuth metadata.
+ *
+ * Configuration first; the request's own view of itself only when a proxy is
+ * trusted to have set it. Reflecting `Host` unconditionally let anyone who
+ * could reach the endpoint choose the address other clients were told to use.
+ */
+export function publicBaseUrl(config, req, port) {
+    if (config.publicUrl !== undefined)
+        return config.publicUrl;
+    if (config.trustProxy !== false)
+        return `${req.protocol}://${req.get('host') ?? ''}`;
+    return `http://${config.bindHost}:${port}`;
+}
+/** Headers every response carries; none of them cost anything for an API. */
+export function securityHeaders() {
+    return (_req, res, next) => {
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        res.setHeader('Cache-Control', 'no-store');
+        res.setHeader('Referrer-Policy', 'no-referrer');
+        res.setHeader('X-Frame-Options', 'DENY');
+        next();
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/http/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/http/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAI9C,mFAAmF;AAEnF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAA6B,EAAE,QAAgB;IAC1E,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,2EAA2E;IAC3E,8EAA8E;IAC9E,wCAAwC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAA0B;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAa,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACvF,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO;IAC5B,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAAkB,EAAE,GAAY,EAAE,IAAY;IAC1E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC;IAC5D,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACrF,OAAO,UAAU,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/http/config.d.ts

@@ -0,0 +1,41 @@
+/** Deployment configuration for the Streamable HTTP transport, read from the environment. */
+export interface HttpConfig {
+    port: number;
+    /** Interface to bind. Loopback by default; containers set 0.0.0.0 explicitly. */
+    bindHost: string;
+    /** When set, every request must present this as a bearer token. */
+    authToken?: string;
+    /** Host header allowlist. Empty means "accept any", which is only safe behind a proxy. */
+    allowedHosts: string[];
+    /** Origin header allowlist for browser callers. */
+    allowedOrigins: string[];
+    rateLimit: number;
+    rateWindowMs: number;
+    /** Sessions idle longer than this are closed, so the map cannot grow forever. */
+    sessionIdleMs: number;
+    maxSessions: number;
+    /**
+     * Whether `X-Forwarded-*` headers are believed: `false`, `true`, or the number
+     * of proxy hops in front of the server. Off by default, because a client can
+     * write those headers itself.
+     */
+    trustProxy: boolean | number;
+    /** The URL clients reach this server at, for the OAuth metadata it publishes. */
+    publicUrl?: string;
+    /** Largest request body accepted, in bytes. */
+    maxBodyBytes: number;
+    /** Explicit consent to listen on a non-loopback interface without a token. */
+    allowUnauthenticated: boolean;
+}
+export declare const DEFAULT_MAX_BODY_BYTES: number;
+export declare function readHttpConfig(): HttpConfig;
+export declare function isLoopback(host: string): boolean;
+/**
+ * Refuse to expose an unauthenticated server to a network.
+ *
+ * Binding beyond loopback with no token used to be the default and was merely
+ * logged. Now it is a startup error unless the operator has said, in so many
+ * words, that they mean it.
+ */
+export declare function assertSafeToStart(config: HttpConfig): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/http/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/http/config.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAE7F,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAsBlD,wBAAgB,cAAc,IAAI,UAAU,CAkB3C;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAY1D"}

package/dist/http/config.js

@@ -0,0 +1,65 @@
+import { envBool, envInt, envList, envString } from '../utils/env.js';
+export const DEFAULT_MAX_BODY_BYTES = 1024 * 1024;
+function readTrustProxy() {
+    const raw = envString('MCP_TRUST_PROXY');
+    if (raw === undefined)
+        return false;
+    if (/^\d+$/.test(raw))
+        return Number(raw);
+    return envBool('MCP_TRUST_PROXY', false);
+}
+function readPublicUrl() {
+    const raw = envString('MCP_PUBLIC_URL');
+    if (raw === undefined)
+        return undefined;
+    try {
+        const url = new URL(raw);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            throw new Error('scheme');
+        return url.toString().replace(/\/+$/, '');
+    }
+    catch {
+        console.error('Ignoring MCP_PUBLIC_URL: not an http(s) URL.');
+        return undefined;
+    }
+}
+export function readHttpConfig() {
+    const publicUrl = readPublicUrl();
+    return {
+        port: envInt('PORT', 3000, { min: 1, max: 65_535 }),
+        bindHost: envString('MCP_BIND_HOST') ?? '127.0.0.1',
+        // An empty MCP_AUTH_TOKEN must mean "no auth", not "the empty token".
+        authToken: envString('MCP_AUTH_TOKEN'),
+        allowedHosts: envList('MCP_ALLOWED_HOSTS'),
+        allowedOrigins: envList('MCP_ALLOWED_ORIGINS'),
+        rateLimit: envInt('MCP_RATE_LIMIT', 60, { min: 1 }),
+        rateWindowMs: envInt('MCP_RATE_WINDOW_MS', 60_000, { min: 1 }),
+        sessionIdleMs: envInt('MCP_SESSION_IDLE_MS', 30 * 60_000, { min: 1 }),
+        maxSessions: envInt('MCP_MAX_SESSIONS', 1000, { min: 1 }),
+        trustProxy: readTrustProxy(),
+        ...(publicUrl === undefined ? {} : { publicUrl }),
+        maxBodyBytes: envInt('MCP_MAX_BODY_BYTES', DEFAULT_MAX_BODY_BYTES, { min: 1024 }),
+        allowUnauthenticated: envBool('MCP_ALLOW_UNAUTHENTICATED', false),
+    };
+}
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1', '::ffff:127.0.0.1']);
+export function isLoopback(host) {
+    return LOOPBACK_HOSTS.has(host.toLowerCase());
+}
+/**
+ * Refuse to expose an unauthenticated server to a network.
+ *
+ * Binding beyond loopback with no token used to be the default and was merely
+ * logged. Now it is a startup error unless the operator has said, in so many
+ * words, that they mean it.
+ */
+export function assertSafeToStart(config) {
+    if (isLoopback(config.bindHost) ||
+        config.authToken !== undefined ||
+        config.allowUnauthenticated) {
+        return;
+    }
+    throw new Error(`Refusing to listen on ${config.bindHost} without authentication. ` +
+        'Set MCP_AUTH_TOKEN, or set MCP_ALLOW_UNAUTHENTICATED=true to run open on purpose.');
+}
+//# sourceMappingURL=config.js.map

package/dist/http/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/http/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAiCtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACnD,QAAQ,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,WAAW;QACnD,sEAAsE;QACtE,SAAS,EAAE,SAAS,CAAC,gBAAgB,CAAC;QACtC,YAAY,EAAE,OAAO,CAAC,mBAAmB,CAAC;QAC1C,cAAc,EAAE,OAAO,CAAC,qBAAqB,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnD,YAAY,EAAE,MAAM,CAAC,oBAAoB,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC9D,aAAa,EAAE,MAAM,CAAC,qBAAqB,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACrE,WAAW,EAAE,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACzD,UAAU,EAAE,cAAc,EAAE;QAC5B,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,YAAY,EAAE,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACjF,oBAAoB,EAAE,OAAO,CAAC,2BAA2B,EAAE,KAAK,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEtF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,IACE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3B,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,MAAM,CAAC,oBAAoB,EAC3B,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,QAAQ,2BAA2B;QACjE,mFAAmF,CACtF,CAAC;AACJ,CAAC"}

package/dist/http/rate-limiter.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Fixed-window counter, per client.
+ *
+ * The map is capped as well as swept. A client that can vary its key at will
+ * — which is what an unvalidated forwarding header allowed — could otherwise
+ * grow it without limit inside a single window.
+ */
+export declare class RateLimiter {
+    private readonly limit;
+    private readonly windowMs;
+    private readonly maxKeys;
+    private readonly hits;
+    constructor(limit: number, windowMs: number, maxKeys?: number);
+    check(key: string, now?: number): {
+        allowed: boolean;
+        remaining: number;
+        retryAfter: number;
+    };
+    /** Expired entries go first; failing that, the oldest live one (Map insertion order). */
+    private makeRoom;
+    sweep(now?: number): void;
+    get size(): number;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/http/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/http/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyD;gBAG3D,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,SAAS;IAGnC,KAAK,CACH,GAAG,EAAE,MAAM,EACX,GAAG,SAAa,GACf;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAkB9D,yFAAyF;IACzF,OAAO,CAAC,QAAQ;IAQhB,KAAK,CAAC,GAAG,SAAa,GAAG,IAAI;IAM7B,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/http/rate-limiter.js

@@ -0,0 +1,55 @@
+/**
+ * Fixed-window counter, per client.
+ *
+ * The map is capped as well as swept. A client that can vary its key at will
+ * — which is what an unvalidated forwarding header allowed — could otherwise
+ * grow it without limit inside a single window.
+ */
+export class RateLimiter {
+    limit;
+    windowMs;
+    maxKeys;
+    hits = new Map();
+    constructor(limit, windowMs, maxKeys = 10_000) {
+        this.limit = limit;
+        this.windowMs = windowMs;
+        this.maxKeys = maxKeys;
+    }
+    check(key, now = Date.now()) {
+        const entry = this.hits.get(key);
+        if (!entry || now > entry.resetAt) {
+            if (!entry)
+                this.makeRoom(now);
+            this.hits.set(key, { count: 1, resetAt: now + this.windowMs });
+            return { allowed: true, remaining: this.limit - 1, retryAfter: 0 };
+        }
+        entry.count++;
+        const allowed = entry.count <= this.limit;
+        return {
+            allowed,
+            remaining: Math.max(0, this.limit - entry.count),
+            retryAfter: allowed ? 0 : Math.ceil((entry.resetAt - now) / 1000),
+        };
+    }
+    /** Expired entries go first; failing that, the oldest live one (Map insertion order). */
+    makeRoom(now) {
+        if (this.hits.size < this.maxKeys)
+            return;
+        this.sweep(now);
+        if (this.hits.size < this.maxKeys)
+            return;
+        const oldest = this.hits.keys().next();
+        if (!oldest.done)
+            this.hits.delete(oldest.value);
+    }
+    sweep(now = Date.now()) {
+        for (const [key, entry] of this.hits) {
+            if (now > entry.resetAt)
+                this.hits.delete(key);
+        }
+    }
+    get size() {
+        return this.hits.size;
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/http/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/http/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IAIH;IACA;IACA;IALF,IAAI,GAAG,IAAI,GAAG,EAA8C,CAAC;IAE9E,YACmB,KAAa,EACb,QAAgB,EAChB,UAAU,MAAM;QAFhB,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAS;IAChC,CAAC;IAEJ,KAAK,CACH,GAAW,EACX,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACrE,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAC1C,OAAO;YACL,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAChD,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;SAClE,CAAC;IACJ,CAAC;IAED,yFAAyF;IACjF,QAAQ,CAAC,GAAW;QAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF"}

package/dist/http/sessions.d.ts

@@ -0,0 +1,34 @@
+import type { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+/** Live MCP sessions, keyed by the id the transport issued. */
+export interface Session {
+    transport: StreamableHTTPServerTransport;
+    lastSeen: number;
+}
+/**
+ * Capacity is reserved synchronously, before the awaits that create a session.
+ *
+ * Checking `size` and then awaiting let every concurrent initialize pass the
+ * check together and overshoot the cap. A reservation counts from the moment
+ * the decision is made until the session is committed or abandoned.
+ */
+export declare class SessionStore {
+    private readonly maxSessions;
+    private readonly sessions;
+    private reserved;
+    constructor(maxSessions: number);
+    /** Claims a slot, or reports that none is free. Pending reservations count. */
+    reserve(): boolean;
+    /** Turns a reservation into a session. */
+    commit(id: string, transport: StreamableHTTPServerTransport): void;
+    /** Gives a reservation back when the session never came to be. */
+    release(): void;
+    get(id: string): Session | undefined;
+    touch(id: string): void;
+    delete(id: string): void;
+    /** Closes and forgets every session idle longer than `idleMs`. */
+    sweep(now: number, idleMs: number): void;
+    closeAll(): Promise<void>;
+    /** Committed sessions only; reservations are transient. */
+    get size(): number;
+}
+//# sourceMappingURL=sessions.d.ts.map

package/dist/http/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/http/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAExG,+DAA+D;AAE/D,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,6BAA6B,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,qBAAa,YAAY;IAIX,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAK;gBAEQ,WAAW,EAAE,MAAM;IAEhD,+EAA+E;IAC/E,OAAO,IAAI,OAAO;IAMlB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,6BAA6B,GAAG,IAAI;IAKlE,kEAAkE;IAClE,OAAO,IAAI,IAAI;IAIf,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAIpC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKvB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIxB,kEAAkE;IAClE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IASlC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,2DAA2D;IAC3D,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/http/sessions.js

@@ -0,0 +1,62 @@
+/**
+ * Capacity is reserved synchronously, before the awaits that create a session.
+ *
+ * Checking `size` and then awaiting let every concurrent initialize pass the
+ * check together and overshoot the cap. A reservation counts from the moment
+ * the decision is made until the session is committed or abandoned.
+ */
+export class SessionStore {
+    maxSessions;
+    sessions = new Map();
+    reserved = 0;
+    constructor(maxSessions) {
+        this.maxSessions = maxSessions;
+    }
+    /** Claims a slot, or reports that none is free. Pending reservations count. */
+    reserve() {
+        if (this.sessions.size + this.reserved >= this.maxSessions)
+            return false;
+        this.reserved++;
+        return true;
+    }
+    /** Turns a reservation into a session. */
+    commit(id, transport) {
+        this.reserved = Math.max(0, this.reserved - 1);
+        this.sessions.set(id, { transport, lastSeen: Date.now() });
+    }
+    /** Gives a reservation back when the session never came to be. */
+    release() {
+        this.reserved = Math.max(0, this.reserved - 1);
+    }
+    get(id) {
+        return this.sessions.get(id);
+    }
+    touch(id) {
+        const session = this.sessions.get(id);
+        if (session)
+            session.lastSeen = Date.now();
+    }
+    delete(id) {
+        this.sessions.delete(id);
+    }
+    /** Closes and forgets every session idle longer than `idleMs`. */
+    sweep(now, idleMs) {
+        for (const [id, session] of this.sessions) {
+            if (now - session.lastSeen > idleMs) {
+                this.sessions.delete(id);
+                void session.transport.close();
+            }
+        }
+    }
+    async closeAll() {
+        for (const [id, session] of this.sessions) {
+            this.sessions.delete(id);
+            await session.transport.close();
+        }
+    }
+    /** Committed sessions only; reservations are transient. */
+    get size() {
+        return this.sessions.size;
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/dist/http/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/http/sessions.ts"],"names":[],"mappings":"AASA;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IAIM;IAHZ,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC/C,QAAQ,GAAG,CAAC,CAAC;IAErB,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD,+EAA+E;IAC/E,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0CAA0C;IAC1C,MAAM,CAAC,EAAU,EAAE,SAAwC;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,kEAAkE;IAClE,OAAO;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,EAAU;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO;YAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,GAAW,EAAE,MAAc;QAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}

package/dist/http.d.ts

@@ -1,58 +1,16 @@
-import type { Request } from 'express';
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type HttpConfig } from './http/config.js';
 /**
  * Streamable HTTP transport.
  *
  * Split out of index.ts because it carries all of the deployment-facing
  * concerns — authentication, origin validation, session lifetime, rate limits —
- * none of which apply to the stdio path.
+ * none of which apply to the stdio path. The pieces live under `src/http/`;
+ * this module wires them together and owns the process-level lifecycle.
  */
-export interface HttpConfig {
-    port: number;
-    /** Interface to bind. Containers need 0.0.0.0; local runs should use 127.0.0.1. */
-    bindHost: string;
-    /** When set, every request must present this as a bearer token. */
-    authToken?: string;
-    /** Host header allowlist. Empty means "accept any", which is only safe behind a proxy. */
-    allowedHosts: string[];
-    /** Origin header allowlist for browser callers. */
-    allowedOrigins: string[];
-    rateLimit: number;
-    rateWindowMs: number;
-    /** Sessions idle longer than this are closed, so the map cannot grow forever. */
-    sessionIdleMs: number;
-    maxSessions: number;
-}
-export declare function readHttpConfig(): HttpConfig;
-/** Fixed-window counter, per client. */
-export declare class RateLimiter {
-    private readonly limit;
-    private readonly windowMs;
-    private readonly hits;
-    constructor(limit: number, windowMs: number);
-    check(key: string, now?: number): {
-        allowed: boolean;
-        remaining: number;
-        retryAfter: number;
-    };
-    sweep(now?: number): void;
-    get size(): number;
-}
-/**
- * Compare a presented token against the configured one in constant time, so the
- * endpoint does not leak the token's prefix through response timing.
- */
-export declare function tokenMatches(presented: string | undefined, expected: string): boolean;
-export declare function bearerToken(header: string | undefined): string | undefined;
-export declare function clientKey(req: Request): string;
-/**
- * Node parses a repeated header into an array, so this field is genuinely
- * `string | string[] | undefined`. Asserting it was always a string meant a
- * request that sent `Mcp-Session-Id` twice reached `sessions.get()` holding an
- * array, missed every session, and was reported as an invalid session ID.
- * Ambiguous is treated as absent: two session IDs identify no session.
- */
-export declare function sessionIdOf(req: Request): string | undefined;
+export { bearerToken, clientKey, sessionIdOf, tokenMatches } from './http/auth.js';
+export { assertSafeToStart, isLoopback, readHttpConfig, type HttpConfig } from './http/config.js';
+export { RateLimiter } from './http/rate-limiter.js';
 export interface HttpServerHandle {
     close: () => Promise<void>;
     /** Resolves once bound. Port 0 picks a free port, which tests rely on. */

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,OAAO,EAAY,MAAM,SAAS,CAAC;AAI1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE;;;;;;GAMG;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAcD,wBAAgB,cAAc,IAAI,UAAU,CAa3C;AAED,wCAAwC;AACxC,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJ3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyD;gBAG3D,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM;IAGnC,KAAK,CACH,GAAG,EAAE,MAAM,EACX,GAAG,SAAa,GACf;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAiB9D,KAAK,CAAC,GAAG,SAAa,GAAG,IAAI;IAM7B,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAarF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAI9C;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAG5D;AAaD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,0EAA0E;IAC1E,KAAK,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClC;AAED,wBAAgB,SAAS,CACvB,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,EACzC,MAAM,GAAE,UAA6B,GACpC,gBAAgB,CA6NlB"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAAqC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAKtF;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,0EAA0E;IAC1E,KAAK,EAAE,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClC;AAED,wBAAgB,SAAS,CACvB,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,EACzC,MAAM,GAAE,UAA6B,GACpC,gBAAgB,CA4ElB"}